Nueva variante de malware SpyZBot VZA detectado por la heuristica del ELISTARA

Aun poco detectado por los AV actuales (14 de 43), el ELISTARA ha detectado un sospechoso que ha resultado ser una nueva variante del SpyZBot VZA:

$RECYCLE$.EXE.Muestra EliStartPage v22.60

2011-02-16 18:03:38 (UTC)

finished

malware
Safety score: 0.0%
Compact Print results Antivirus Version Last Update Result
AhnLab-V3 2011.02.14.02 2011.02.14 Trojan/Win32.Zbot
AntiVir 7.11.3.121 2011.02.16 –
Antiy-AVL 2.0.3.7 2011.02.16 –
Avast 4.8.1351.0 2011.02.16 –
Avast5 5.0.677.0 2011.02.16 –
AVG 10.0.0.1190 2011.02.16 –
BitDefender 7.2 2011.02.16 –
CAT-QuickHeal 11.00 2011.02.16 –
ClamAV 0.96.4.0 2011.02.16 –
Commtouch 5.2.11.5 2011.02.16 –
Comodo 7711 2011.02.16 –
DrWeb 5.0.2.03300 2011.02.16 –
Emsisoft 5.1.0.2 2011.02.16 Trojan.Win32.EyeStye!IK
eSafe 7.0.17.0 2011.02.16 –
eTrust-Vet 36.1.8162 2011.02.16 –
F-Prot 4.6.2.117 2011.02.15 –
F-Secure 9.0.16160.0 2011.02.16 –
Fortinet 4.2.254.0 2011.02.16 –
GData 21 2011.02.16 –
Ikarus T3.1.1.97.0 2011.02.16 Trojan.Win32.EyeStye
Jiangmin 13.0.900 2011.02.16 –
K7AntiVirus 9.85.3869 2011.02.16 –
Kaspersky 7.0.0.125 2011.02.16 –
McAfee 5.400.0.1158 2011.02.16 PWS-Spyeye.e
McAfee-GW-Edition 2010.1C 2011.02.16 PWS-Spyeye.e
Microsoft 1.6502 2011.02.16 Trojan:Win32/EyeStye.H
NOD32 5880 2011.02.16 a variant of Win32/Kryptik.KRT
Norman 6.07.03 None.. –
nProtect 2011-02-10.01 2011.02.15 –
Panda 10.0.3.5 2011.02.16 Trj/CI.A
PCTools 7.0.3.5 2011.02.16 Downloader.Lofog
Prevx 3.0 2011.02.16 High Risk Cloaked Malware
Rising 23.45.02.06 2011.02.16 –
Sophos 4.61.0 2011.02.16 Mal/FakeAV-BW
SUPERAntiSpyware 4.40.0.1006 2011.02.16 –
Symantec 20101.3.0.103 2011.02.16 Downloader.Lofog!gen4
TheHacker 6.7.0.1.131 2011.02.15 –
TrendMicro 9.200.0.1012 2011.02.16 TROJ_SPYEYE.SMEP
TrendMicro-HouseCall 9.200.0.1012 2011.02.15 TROJ_SPYEYE.SMEP
VBA32 3.12.14.3 2011.02.16 –
VIPRE 8441 2011.02.16 –
ViRobot 2011.2.16.4313 2011.02.16 –
VirusBuster 13.6.203.0 2011.02.16 –
Additional informationShow all
MD5   : 20639805a1ac9983b7f98a1f8221f52b
SHA1  : fa899edd0c563e5e8f515115e0c33ffd9438de69

File size : 193024 bytes

publisher….: __________ __________
copyright….: (c) __________ __________. ___ _____ ________.
product……: ____________ _______ Microsoft_ Windows_
description..: ______ ________ ______ _ __________
original name: MigWiz.Exe
internal name: MigWiz
file version.: 5.1.2600.5512 (xpsp.080413-2105)

Con la verison 22.63 del ELISTARA ya se controlará y eliminará especificamente esta nueva variente

saludos

ms, 16-72-2011